Black Hat Courses

Lowering the Bar - Deep Learning for Side Channel Analysis

Explore deep learning's potential to automate power side channel analysis, enhancing cryptanalytic techniques and signal processing for improved security assessments.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

The Science of Hiring and Retaining Female Cybersecurity Engineers

Explore latest strategies for recruiting and retaining women in cybersecurity, addressing barriers, debunking myths, and implementing effective frameworks for diversity and inclusion.

• YouTube
• 50 minutes
• Self-Paced
• Conference Talk

From Workstation to Domain Admin - Why Secure Administration Isn't Secure and How to Fix It

Explore secure administration challenges, vulnerabilities in password vaults, and effective strategies for protecting administrative credentials in enterprise environments.

• YouTube
• 49 minutes
• Self-Paced
• Conference Talk

Beating the Blockchain by Mapping Out Decentralized Namecoin and Emercoin Infrastructure

Explore decentralized domain infrastructure using Namecoin and Emercoin blockchains, focusing on unofficial TLDs and alternate DNS resolution for takedown-resistant domains.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Stop That Release, There's a Vulnerability!

Explore BlackBerry's software defect tracking system and risk-based release evaluation process for effective security gating in product development.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

Pestilential Protocol - How Unsecure HL7 Messages Threaten Patient Lives

Explore healthcare cybersecurity risks, focusing on vulnerabilities in medical devices and HL7 messaging protocols that could potentially endanger patient safety and compromise sensitive medical data.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Box is Dead - Long Live Black Box!

Explore the evolution of ATM security against logic attacks, focusing on black box devices and encryption measures implemented to protect cash dispensers.

• YouTube
• 33 minutes
• Self-Paced
• Conference Talk

Back to the Future - A Radical Insecure Design of KVM on ARM

Explore ARM architecture vulnerabilities in KVM, focusing on privilege escalation through exception-generating instructions and hypervisor calls. Learn about potential security risks in virtualization.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk

AFL's Blindspot and How to Resist AFL Fuzzing for Arbitrary ELF Binaries

Explore AFL fuzzing limitations, its blindspot impact on bug detection, and techniques to resist fuzzing for ELF binaries. Learn about AFL's challenges with symbolic execution seeds.

• YouTube
• 29 minutes
• Self-Paced
• Conference Talk

InfoSec Philosophies for the Corrupt Economy

Explores corruption's impact on information security, contrasting developed and developing countries through real-life criminal and victim accounts. Offers insights into navigating security challenges in corrupt environments.

• YouTube
• 24 minutes
• Self-Paced
• Conference Talk

Every ROSE Has Its Thorn - The Dark Art of Remote Online Social Engineering

Explore the methodology of Remote Online Social Engineering campaigns, from target selection to exit strategies, with insights on defense, detection, and counterattacks against online deception.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

How Can Communities Move Forward After Incidents of Sexual Harassment or Assault

Strategies for community healing and accountability after sexual misconduct incidents, focusing on survivor support, offender responsibility, and fostering a stronger, more inclusive environment.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

Efail - Breaking S-MIME and OpenPGP Email Encryption Using Exfiltration Channels

Explore vulnerabilities in S/MIME and OpenPGP email encryption standards, focusing on outdated cryptographic primitives and potential attack vectors using exfiltration channels.

• YouTube
• 46 minutes
• Self-Paced
• Conference Talk

ZEROing Trust - Do Zero Trust Approaches Deliver Real Security?

Analyze effectiveness of zero trust security across modern OS platforms, examining measurable properties to establish trust in various threat scenarios.

• YouTube
• 54 minutes
• Self-Paced
• Conference Talk

Money-rity Report - Using Intelligence to Predict the Next Payment Card Fraud Victims

Explore predictive methods for identifying potential credit card fraud victims before transactions occur, shifting from reactive to proactive fraud prevention strategies.

• YouTube
• 23 minutes
• Self-Paced
• Conference Talk